latchset / kryoptic

a pkcs#11 software token written in Rust
GNU General Public License v3.0
10 stars 4 forks source link

start implementing TLS related KDFs #75

Closed simo5 closed 2 months ago

simo5 commented 2 months ago

Start with CKM_TLS12_MASTER_KEY_DERIVE, will add more in the next few days.

simo5 commented 2 months ago

Converted to draft as I want a review for this part, but want to add a few more KDFs to the PR as a whole.

simo5 commented 2 months ago

I added implementation on CK_TLS12_KEY_MAC_DERIVE, tomorrow I'll change the tests to use it on the vectors I already imported previously for the other function, as those vectors also have results for this mechanism which implements key expansion for tls

simo5 commented 2 months ago

@Jakuje I think I will stop here for this PR, and only resolve any issues you may highlight, there are enough commits and enough churn already :-)

simo5 commented 2 months ago

Thanks for the review Jakub!